Creating the QoS rule on the FortiWLC
- On the FortiWLC, go to Configuration > Policies > QoS and select the QoS and Firewall Rules tab. Select ADD to create two profiles.
For the first rule, allow the wireless client to access the FortiAuthenticator guest portal.
- ID: Rule number (in the example, 20).
- Destination IP: IP address of the FortiAuthenticator, and enable Match.
- Destination Netmask: 255.255.255.255
- Destination Port: 443, and enable Match.
- Network Protocol: 6, and enable Match.
- Firewall Filter ID: String from the security profile, and enable Match.
- QoS Protocol: Other.
- ID: Rule number (in the example, 21).
- Source IP: IP address of the FortiAuthenticator, and enable Match.
- Source Netmask: 255.255.255.255
- Source Port: 443, and enable Match.
- Network Protocol: 6, and enable Match.
- Firewall Filter ID: Use the Passthrough Firewall Filter ID string from the security profile, and enable Match.
- QoS Protocol: Other.
